Section 3 


Central Processor Architecture 


This section describes the architecture of the Models 23 and larger central processors, 
From 2 functional point of view the processors are identical. The differences among them 
are in the amount of memory they can address, the number of registers, the kinds of 
options, and the number of peripherals each is capable of handling. 


REGISTERS 


In the Models 23 and 33, there are |8 registers visible to the programmer: 


o 7 general registers (R1—R7): (RI —R3) can be used as index registers 
o 7 base registers (BI—B7) 

o | program counter (P register) 

o 1 system status register (S register) 

o 1 mode control register (M1 register) 

© 1 indicator register (I register) 


In the Models 43 and larger, there are 26 registers visible to the programmer. They 
include all of those found in the Models 23 and 33 plus the following: 


© | stack address (T) register 

© | remote descriptor base register (RDBR)! 

© 1 mode control register (M3) for the CIP 

© 3 RFU? mode control registers (M2, M6, M7) 
o 2 mode control registers for the SIP (M4, M5) 


All of the 26 registers can be accessed via the control panel. Other registers can also be 
uceessed from the control panel, including: 


© Instruction register 
o Memory address register 
o Memory data register 


Finally, there is a single 32-bit scientific register that is simulated by software and is used 
to store floating-point operands. This register is utilized by the scientific instruction set that 
is automatically trapped to software routines in Model 23 and 33 systems. In Models 43 and 
larger, an optional Scientific Instruction Processor is offered that can hold either single- 
precision (32-bit) or double-precision (64-bit) floating-point quantities. 


‘Used with CIP instructions. 
* Reserved for Future Use. 
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Data Formats 

The word length in all Level 6 central processors is 16 bits. All hardware registers are 16 
bits in length except for the M and [ registers, which are 8 bits; scientific accumulators, 
which are 32 or 64 bits; and for the Models 43 and larger, the address registers. which are 
20 bits. Within this framework the central processor has the ability to process double-words 
(32 bits in length). words (16 bits), halfwords or bytes (8 bits), and single bits. 

Basically, there are two types of data: signed data used in arithmetic operations; and 
unsigned data, used for logical quantities, addresses, ASCII characters, or any other type of 
internal data coding. 

Unsigned data is usually expressed in hexadecimal notation. Thus, a 16-bit address can 
range from (9000), , to (FFFF), o: The contents of a byte can be expressed from (00) ~ 
(PP), A 16-bit word can contain two ASCII characters; if # word contained (413) 5 
this would represent “A9” in ASCIL 

Arvithinetic (signed) data is represented in twos complement notation. All arithmetic is 
performed in binary, with single word (16-bit) values extending from -32,768 to +32,767. 
A signed value in a byte can range from -128 to +127. Figure 3-1 shows the various data 
types for both signed and unsigned data 

A byte in memory can represent either an unsigned 8-bit quantity or an arithmetic value 
with a sign and seven bits. The byte can occupy the left-or right-hand half of a word. How- 
ever, when the byte is loaded into a register, it will occupy the right-half of the register. The 
lett-half will contain either zeros, if a logical load instruction was used, or the sign extended, 
ifan arithmetic load was used. (See Figure 3-2 for examples). 


SIGNED DATA {TWOS COMPLEMENT) RANGE 
Fama 
DOUBLEWORD |S} SABOUE 
f cal 2 BILLION 
Oo. 
worp ff 32,768 ta + 92,767 
or 15 
BYTE f 128 10 +127 
ot Ed 
UNSIGNED DATA 
wore 1-70 85536 (HEX OOO0-FFFF) 
i) 16 
BYTE O TO 255 (HEX 00-FF) 
7 7 
BIT Oot 
ao 


Figure 3-1, Data Formats 
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Figure 3-2, Byte Formats 


Floating-point values occupy two or four words. The format for a floating-point value is 
as follows 
c S M 
0 678 31/63 
Where C is a 7-bit value representing the characteristic expressed as an excess 64 power-of- 
sixteen exponent 
§ is the sign of the mantissa 
M is the magnitude of the mantissa 


General Registers 

There are seven general registers (R registers) numbered RI through R7. These registers 
may be loaded from or stored in memory cither a word ora half-word at a time. (If a half- 
word store is executed, it is the right-half of the register that is stored.) It is possible to load 
and store two of them (R6 and R7) as a single double-word. Each register can be shifted 
individually or as pairs (even/odd) and used as operands in arithmetic, logical, and compare 
operations. Additionally, the first three registers (R1—R3) also double as index registers and 
may be used to store double-word, word, half-word, or bit counts. These quantities are used 
to modify the addresses of items in memory. See Figure 3-3. 


Base Registers 

In addition to the seven general (R) registers, there are seven base registers (B registers). 
These are numbered BI through BY. It is a very important concept of Level 6 architecture 
that the general registers are separate {rom the base registers. The Models 43 and larger also 
have x stack address (T) register and a remote deseriptor-base register, 

Address registers in the Models 23 and 33 are all 16 bits in length: however, in the Models 
43 and larger they are 20 bits in length and are used either in the Short Address Form (SAF) 
or in the Long Address Form (LAF). SAF is oriented to systems of 128K bytes (64K words) 
or less of addressable memory where each word can be accessed through a 16-bit address 
pointer. LAF is oriented to systems of 1M words where each word can be accessed through 
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Figure 3-3, General Registers 


a 20-bit address. An address stored in memory takes up one word (16 bits) in SAF mode and 
two words (32 bits) in LAF mode. The most significant 12 bits of an LAF address field in 
memory are reserved for hardware use, 


WORD 0 
Bit:0 15 
SAF Address Register 
(BI through B7, P, and ANY ADDRESS 
T in Models 43 and 
larger) 
WORD 0 WORD | 
rk. 
Bit: 0 1112 1516 31 
LAF Address MBZ | | 
(BI through B7, P, and 
T in Models 43 and Least Significant 
larger) Bits of Address 
‘Most Significant 
Bits of Address 


‘Reserved for Hardware 


The seven base registers can be used for formulating addresses by pointing to any pro- 
cedure, data, or arbitrary location in the system. Address registers typically contain addresses 
and are not used for arithmetic calculations. However, they do have the capability of being 
automatically incremented or decremented during instruction execution. This allows them 
to be used to scan arrays either forwards or backwards and also to conveniently utilize 
stacks. 

Addresses are normally expressed in memory as four or eight hexadecimal digits, with the 
memory addresses running from 0-0 through F-F. Details of how base registers are used in 
formulating addresses are given in Section 4, 
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Program Counter 

The program counter (P register) is a 16-bit (SAF) or 20-bit (LAF) register which points 
to the next instruction to be executed. Instruction length is variable. The majority of 
instructions are one or two words in length, but certain instructions can be as long as ten. 
The program counter is always incremented during instruction execution to point to the 
next sequential instruction, except for branches and jumps. Thus, for example, if a two- 
word instruction is executed, the program counter will be incremented by two during its 
execution. 

The Models 43 and larger have a pre-fetch or look-ahead capability. Software must 
ensure that procedures within the pre-fetch range are not modified at run time. If proce- 
t be modified at run time, a jump or branch instruction must be executed after 
ion, and before subsequent execution of the modified code. 


Indicator Register 
The indicator register (I register) is an 8-bit register that contains various single-bit indi- 
cators. The register format is as follows: 


R 
Olr 

I Register [V. Fle of abake 
ol 


234567 


The indicators contained in this register can be grouped as follows: 


o Arithmetic indicators 
— OV (overflow indicator) 
C (carry bit) 
o Comparison in 
— G (greater than indicator) 
L (less than indicator) 
U (unequal signs indicator) 
© Bit indicator 
— B (bit test indicator) 
© T/O Indicator 
— | (input/output indicator) 


Arithmetie Indicators 

Two indicators are affected by arithmetic and shifting operations: the overflow (OV) 
indicator and the carry (C) indicator, 

The overflow indicator is set when any of the seven general registers “overflows,” that is, 
when an arithmetic result produced is larger than the capacity of the register. For example, 
adding the quantity 1 to a register that contains +32,767 (7FFF),.5 will set overflow 
because the arithmetic capacity is exceeded. The register would contain (8000), ,, or 
—32,768 after the addition. If the data were not to be interpreted as signed data, the over- 
flow could be ignored. 

The carry (C) indicator, conversely, is set when the logical capacity of a register is 
exceeded, Thus if 3 were added to a register that contained (FFFE) 5:4 carry to the 17th 
bit would be produced, ie., the answer would be (1)(0001), ,- However, if these were 
arithmetic quantities, (FFFE),, would represent and adding +3 to it would produce 
(0001 Migs this is the correct answer and thus the curry would be ignored. 
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Comparison Indicators 

The three indicators which are controlled by compare instructions are the greater than 
(G), less than (Lj, and unlike signs (U) indicators. These one-bit indicators contain the 
results of the last compare instruction executed by the computer and in turn can be tgsted 
by other central processor instructions (sce Branch on Indicator in Section 4), 

A comparison is typically executed between a register and a word in memory. If the 
contents of the register are greater, the G indicator is set: if the contents of memory are 
greater, the register is less and L is set. 


Bit Test Indicator 

This can be considered a one-bit register loaded by load bit instructions. Not only can it 
be loaded from any bit in any word of memory, but it can also be set if any of a group of 
bits in a word in memory is set, The selection is done under the contro! of a 16-bit mask and 
is very useful for testing bit patterns in memory. 


Input/Output Indicator 

The I-bit stores an indication of whether the last input/output command was successful. 
For example, if the central processor issues a command output to a peripheral channel that 
is busy, the peripheral channel will issue a “NAK,” which in turn will cause the I/O indi- 
cator lo be cleared. Software can then test this indicator and determine what alternate 
action to take. 


Mode Control Registers 
Other contro] registers are the trap enable/mode control registers (M1—M7), These are all 
8-bit registers. Registers M2, M6, and M7 are reserved for future use. 


MI Register 


Overflow trap control bits 
= Trap Disabled 
1 = Trap Enabled 


Trace trap control bit 
0 = Trace Trap Disabled 
1 = Trace Trap Enabled 


The seven overflow trap control bits are associated with the seven general registers 
R1—R7. If overflow in any one of these occurs and if the corresponding trap control bit is 
set, a trap occurs through trap vector 6, This facility saves the programmer from haying to 
test the result of every arithmetic operation for overflow, and yet also guarantees that over- 
flow will not go undetected. 

The other bit in this register, bit zero, is the trace trap enable bit (J-bit), When this is 
enabled, all jumps and branches that are executed in a program will cause a trap to the trace 
entry location. This bit therefore allows a programmer to trace a code without having to 
modify its procedure at all. 

The following M registers are found only in the Models 43 and larger. The M3 register is 
only used with the Models 47 and 57, The M4 and MS registers are used only when the 
oplional SIP is installed. 


0 1 
M2 Register [ RFU 
ao 1 2 7 
M3 Register [OV[TR | RFU J 
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{he format of the CIP Control Register (M3) is the same as that of the CIP Mode Register 
which is described later in this section. 


OT 2 8.4 8. 8 2 
M4 Register [R/T[RFU[ML1] ALI[ML2] AL2[ML3[AL3| 


SAl1 SA2 SAI 


The formats of registers M4 and MS are the same as those of the SIP Mode Register 
and the SIP Trap Mask Register respectively. These registers are described later in this 


section. 
O41 @. 3 4 7 
MS Register [EUM|RFU [sEM|PEM RFU 
oO 7 
M6 Register RFU 
0 7 
M7 Register RFU 


Status Register 
The status register (S register) is a 16-bit register. This register contains four fields, as 


shown below: OLT indicator (Q), the privileged state indicator (P), the processor ID, and 
the interrupt priority level. 


S Register 


Ol FS 78910 15 


QET Indicator 
This I-bit field indicates whether a unit in the system has successfully completed its 


Quality Logic Test (QLT) or not. 


0 = QLT successtully completed 
1 =QLT either still running or failed 


Privileged State Indicator 
There are two modes of instruction execution: user mode and privileged mode. The 


privilege field in the S register defines this mode as follows: 


P = Privilege State (Ring Number) 
!1 = Ring 0 (Privilege) 
10 = Ring | (Privilege) 
Ol = Ring 2 (User) 
00 = Ring 3 (User) 


NOTE: Privileges and ace! rights accorded the various rings are in inverse order 
to the ring number (i.e., Ring 0 is the most privileged). 


CENTRAL PROCESSOR 


ARCHITECTURE 37 cc71 


If bit 1 is not set, the processor is in the user mode and will automatically trap when 
certain instructions are attempted (bit ? is ignored). Input/output command instructions 
plus the interrupt level change instruction are privileged instructions and can be executed 
only when the privilege mode bit is set. They will be automatically trapped if attempted in 
user mode. By utilizing this hardware feature, systems can be protected against unauthor- 
ized use of input/output by user routines, 


Processor ID 

This is a 2-bit field that is fixed during system configuration. It is typically zero (a second 
processor in the system would have an ID of 01). These 2 bits are used as the least significant 
bits of the 10-bit channel number for the processor itself. The high 8 bits are always zero. 
Thus, the processor ID and the processor channel number are for all intents and purposes 
synonymous. 

The processor ID in the § register is hard-wired and cannot be changed under program 
control. 


Priority Level 

This 6-bit level field defines the interrupt priority level on which the processor is currently 
executing instructions. Zero is the highest priority level and 63 is the lowest. Upon receiving 
interrupt requests from other units, it also determines whether the interrupting unit is of 
higher, equal, or lower priority. Only higher priority interrupt requests are granted. When an 
interrupt occurs, the level of the interrupting unit replaces the level in the status register. 
The old level is always automatically stored. (See Interrupts for further details.) 


Stack Address Register 
This register, which is used only with the Models 43 and larger, points to the first word of 
the stack header. See also “Stack Management” described later in this section. 


ve) 15/19 


T Register Address of Current Stack 


Remote Descriptor Base Register 

This register, which is used only with the Models 47 and 57, contains the address of a 
remote descriptor array, An offset of the RDBR and the contents of a label in the CIP 
instruction are combined to generate the remote descriptor address. See also “(Commer- 
cial Instructions” in Section 4, 


QO 19 


RDBR Register| Word Address 


SUMMARY OF PROGRAM VISIBLE REGISTERS 


Thus 18 registers are visible to the Model 23 and 33 programmer and 26 ta the Model 43, 
47, 53, and 57 programmer, The central processor registers are shown in Figure 3-4. Of the 
various registers, two are automatically saved and restored upon interrupt (the S register and 
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Figure 3-4, Central Processor Register Complement 
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the P register), The others have their context stored and restored under firmware control 
according to a 16-/32-bit mask. This mask is set up under program control. Its format is as 
follows: 


INTERRUPT SAVE MASK #1 


INTERRUPT SAVE MASK #24 


0 1 34 56 78 13:14 215 
M “ s|'¢ M2 
m| NATSAP ) az [1 | 1 MBZ T |e 
U LEG P| P M7 
Pini Context L CIP Context ‘M2 is “right most” 
L_ SIP Context 
3 Stack Address 
*MBZ for Models 23 and 33 Register 
INTERRUPTS 


There are 64 levels of interrupt, numbered from 0 to 63; level 0 has the highest priority, 
Clearing the computer puts it into level 0, which in effect makes it uninterruptable. 

Associated with each interrupt level is a dedicated memory location which contains the 
interrupt vector. These locations extending from address 0080 to address OOBF (OOFF for 
LAF) contain a pointer to an interrupt save area, which is a block of memory in which the 
hardware/firmware saves context when an interrupt occurs. The interrupt save area needs 
only to be set up for those levels that are active in a particular program. Each interrupt save 
area has five or six fixed locations and up to 47 variable locations, These locations are as 
follows: 


o DEV — this location contains the channel number (bits 0-9) and level (bits 10-15) of an 
interrupting dev 


NOTE: DEY is not updated when a level is activated by an internal condition such as 
a power failure (level 0), watchdog timer (level 1), trap save area overflow 
(level 2), real-time clock (assigned level), or execution of a LEV instruction. 
Interrupt levels 1, 2, and the igned real-time clock level should not be 
used for devices, If these levels are assigned to devices, or if multiple devices 
have been assigned to the same interrupt level, software should clear DEV 
before each [/O operation that will interrupt. This ensures that the inter- 
rupted level can determine the interrupt source. 


o ISM |/2 — these two locations contain the 32. interrupt save mask. This mask con- 
trols which of the registers will be saved in the variable portion of the interrupt save 
area 

o P — in this word or two, the program counter of the interrupt level is stored. It acts as 
a pointer to the interrupt handling procedure for a new level, or upon restoration of an 
interrupted level, to the location of the next instruction to be executed. 

o S — this is where the status register is automatically stored. Note that when a new 
interrupt level is set up, the $ register is loaded [rom this location only as far as the 
privileged mode field is concerned; the level is generated automatically, and the proc- 
essor ID is hard-wired. 
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Words 6: are locations for saying the machine registers under control of the interrupt 
save mask. If the interrupt save mask is all zeros, none of these words will be reserved. 
The mask bits are scanned from right (bit 15) to left (bit 0), ISMI first and then ISM2. 

It should also be noted that the word(s) prior to the one pointed to by the interrupt 
vector (that is, the word(s) prior to the device word) are also dedicated. This includes the 


TSAP which points to a trap save area, (See discussion of Traps.) 

Figure 3-5 shows this action of an interrupt. Both levels 20 and 30 have had their interrupt 
save areas set up — level 20s at AB20, as pointed to by its vector at 0094 or OOA8, and level 
30s ut 1000, as pointed to by its vector at 009E or OOBC. 

INTERRUPT DESIGNATED | 
LEVELS MEMORY LOCATION POINTER 
GAR {LAF INTERRUPT SAVE AREA 
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——1—_- 1 one 
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——_!__. ome on0FC 

——ti___ war coor 
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UNDER CONTROL 
OF MASK 
SEQUENCE: 


la 
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DETERMINED 8Y MASK IN 1001 Bs ag 
© REGISTERS LOADED FROW AB25 ON UP B20 ae 
AS DETERMINED BY MASK IN AB21 a1 at 
+S LOADS WITH LEVEL 20 AND. ' mt 
PIT FROM A524 Mz 
+? LOADS FROM AB23 i 
7 
a 

Rose 
SIP CONTEXT 


‘Second od of SM must be 200 fr Modes 23 nd 33 
Figure 3-5. Interrupt Action 


If level 30 is interrupted by level 20, firmware automatically saves the register contents 
in the level 30 interrupt save area and loads the registers with the values in the level 20 
interrupt save area. One of these values is the starting address of the level 20 interrupt sub- 
routine which is automatically loaded (in this example) from location AB23 into P. 

Associated with each interrupt level is a dedicated flag bit which is set when the interrupt 
is initiated, These bits are stored in four dedicated memory locations, 0020-0023. In the 
example above, both bits 20 and 30 would be set. At the end of the interrupt routine for 
level 20, a level change instruction (LEV) would be executed. This would clear the bit for 
leyel 20 and then scan the table to determine which is the next highest scheduled level. If 
no intermediate interrupts (such as level 25) were pending, it would scan the table, find bit 
30 set. and therefore retum to level 30. 


CENTRAL PROCESSOR 
ARCHITECTURE. 311 Cor 


TABLE 3-1, EVENT INTERRUPT LEVEL ASSIGNMENT 


Event Causing Interrupt Level Assignment Comment 
Incipient Power Failure 0 Highest priority 
Watchdog Timer Runout 1 - 


Overflow of Trap Context 


Save Area 

Real-Time Clock os Level is contained in main memory location 
0016 (HEX) 

Device Requiring Service Level is dynamically controlled by software 

LEV Instruction Level specified in instruction 


The ILE¥ instruction can set or clear activity flags. change the current level, inhibit inter- 
rupts, or do a “quick change” without saving and restoring context. By changing the current 
level to level 3 all device interrupts can be inhibited; level 2 (overflow of trap context save 
area), level 1 (watchdog timer runout), and level 0 (incipient power failure) will still be 
enabled. Table 3-1 shows the assignment of interrupt levels. 


TRAPS 


Traps are a special software- or hardware-related condition that may occur during execu- 
tion of a task. The Level 6 hardware/firmware responds to many trap conditions. The design 
of any application program should provide that when a trap occurs, the hardware/software 
response will include calling a dedicated software routine (a trap handler) to react to the 
trap, When trap handlers are provided, handling the trap is invisible to the task that caused 
the trap. 

A trap can occur at any priority level, and several can be nested at the same level. A trap 
could be entered at one level, that level interrupted during the execution of the trap routine, 
and then the same trap routine reentered in the new level. See Table 3-2. 

Each type of trap has its own trap vector containing a pointer to the trap-handler proce- 
dure. Also utilized are four? pointers (NATSAPs) at locations 10 and below to form “pools” 
of available Trap Save Areas (TSA). The linkage between TSAs in a pool is maintained by 
the firmware, When a trap occurs, the CP uses the NATSAP selected by ISM2 to access one 
of the four TSA pools (only one pool is supported by the Models 23 and 33). If the pool is 
empty, the CP will halt; otherwise, the first available TSA is unlinked from the pool and 
some (but not all) register contents are automatically stored in the trap save area. The 
pointer in the first word of the interrupt save area for the current level is adjusted so that it 
points to the trap save area; the pointer in the trap save area points to any other traps that 
occurred at the same interrupt level. Thus, several traps may be nested at the same interrupt 
level. At the end of the execution of the trap-handler procedure, a return from trap (RTT) 
must be executed; this does a restoration of the partial context that was stored and returns 
all pointers to their original e. 

The relationship of traps and interrupts, and their vector linkage are shown in Figure 3-6. 


*Oaly one NATSAP (next available trap save area pointer) is available in the Models 23 and 33 processors, 
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TABLE 3-2. TRAP VECTORS AND EVENTS 


Vector = Event 

Vector #00 No trap event set 

Vector #1 Monitor eall (MCL instruction) 

Vector #2 Trace® (debug) or BRK instruction 

Vector #3 Scientific operation not in hardware 

Vector #4 Reserved for software use 

Vector #5 Other operation not in hardware (or undefined) 

Vector Integer register overflow* 

Vector Scientific divide by zero 

Vector Scientific exponent overflow 

Vector #9 Stack underflow 

Vector #10 Stack overflow 

Vector #11 Reserved for future use 

Vector #12 Recursive Remote Descriptor usage 

Vector #13 Unprivileged use of privileged operation 

Vector #14 Unauthorized reference to protected memory 
(with optional protection) 

Vector 415 Reference to unavailable resource 

Vector #16 Program error. 

Vector #17 Memory or Bus error (parity or noncorrectable 
EDAC) detected 

Vector #18 Reserved for future use 

Vector #19 Scientific exponent underflow* 

Vector #20 Scientific program error 

Vector #21 Scientific significance error® 

Vector #22 Scientific precision error® 

Vector #23 Reference to unavailable resource by SIP or CIP 

Vector #2 Memory or Bus error seen by SIP or CIP 

Vector #2 Commercial Divide by Zero 

Vector Commercial Illegal Specification 

Vector #27 Commercial [legal Character 

Vector #2 Commercial Truncation 

Vector #29 Commercial Overflow 

Vector #30 CIP QLT fault 

Vector #31 SIP QLT fault 

Vector #32 through Vector #46 Reserved for future use 


NOTE: The Models 23 and 33 do not use Trap Vectors 18 through 46. Other trap vectors are used/ 
not used depending on the model and options installed. 


“Te enabled. 
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Figure 3-6, Trap Vector and Interrupt Vector Linkage 


o NATSAP — Pointers to Next Available Trap Save Area: Four NATSAPs (NATSAPO to 
NATSAP3) are maintained at location 0010 and below, The NATSAP (and TSA pool) 
that is to be used for the current level is selected by bits 1-3 of ISM2. NATSAPO at 
location 0010 is the only TSA pool pointer supported by the Models 23 and 33. Refer 
to Figure 3-6, 

o TSA Trap Save Areas: Initially, when processing of an application begins, all trap 
save areas exist in a linked “pool,” which is pointed to by memory location 0010,,. 
All trap save areas remain in this pool until a trap condition occurs within a running 
task, at which point the hardware/firmware (1) stores information in the first available 
trap save area in the pool, (2) links this trap save area to the interrupt save area for the 
priority level of the task that was running when the trap occurred, and (3) unlinks this 
trap save area from the pool. Later, after the trap handler (if any) has completed its 
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work, the trap save area is returned to the pool of available trap save areas. Thus, at 
any time, a given trap save area is either in the pool of available trap save areas or in use 
because of a trap condition, The trap save areas reside in the system pool. 
Trap save areas are 64 words long in SAF mode, and 104 words in LAF mode. 
o TSAL — Trap Save Area Link: When the trap save area resides in the “available” pool, 
TSAL points to the next trap save area in the pool; the TSAL of the last trap save area 
in the pool contains a null pointer, When the trap save area is in use ( connected to 
an interrupt save area), TSAL contains a null pointer (if this is the only or last trap save 
area connected to this interrupt save area) or it points to the next trap save area con- 
nected to this interrupt save area 
I — Indicator Register; The contents of this register are saved by hardware/ firmware 
when a trap occurs, This register is then available for use by the trap handler. 
o R3 — R3 Register: The contents of this register are saved by hardware /firmware when 
a trap oceurs. This register is then available for use by the trap handler. 
© INSTR — Instruction: The hardware/firmware stores the instruction associated with 
the trap. Ifa multiword instruction is involved, the first word is saved. 
o Z— Z-Word: This word contains miscellaneous information relative to the trap. 
o A ~ A-Word: In many cases, this word contains an address associated with the trap. 
The nature of the saved address is governed by the specific trap condition and the 
specific instruction associated with the trap. 
P — Program Counter: The contents of the program counter are saved by the hardware/ 
firmware when a trap occurs. This is the address to which a return is made when the 
trap handler completes, In most cases the program counter will point to the instruction 
or location following the instruction associated with the trap. However, when an input/ 
output instruction is involved, the program counter may point to an address within the 
instruction: in this case, the trap handler must modify this word before issuing a return 
to “normal” task processing. 
o B3 — B3 Register: The contents of this register are saved by hardware/firmware when a 
trap occurs, This register is then available for use by the trap handler; as the trap 
handler is entered, the B3 register points to the A-word in the trap save area. 


c 


Note that when a trap occurs, if the appropriate trap handler is available in the applica- 
tion, the first word (TSAP) of the interrupt save area (for the current priority level) is set to 
point to the link word (TSAL) of the trap save area in which hardware/firmware has just 
stored information relative to the trap (see Figure 3-6). TSAP is subsequently used by the 
trap handler to gain access to the trap save area. 


QUEUE MANAGEMENT 


The Models 43 and larger provide a queue capability that allows easy maintenance of 
ordered lists of “frames” (a frame contains a frame priority number, a next frame pointer, 
and an associated data structure). Each list is identified by a lock frame which contains a 
Jock word and list head and tail pointers (Figure 3-7). 

Four generic instructions are provided to enqueue/dequeue frames from the list. The 
instructions, which are described in Section 4, are as follows 


o Queue on Head (QOH) 

© Queue on Tail (QOT) 

o Dequeue from Head (DOH) 
o Dequeue by Address (DQA) 
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L Low Memory 
Lock ./ ™ PRIORITY PALORITY | PRIORITY 


FIRST NEXT NEXT | Lock 
PF FRAME rFRAME FRAME POINTER 
POINTER POINTER POINTER | 

DATA 
LAST Foata {OATA 
FRAME ——— ——— LAST FRAME 
POINTER FIRST FRAME INTERMEDIATE (TAIL) 
————— (HEAD) FRAME 
LOCK FRAME ; 

High Memory 


NOTES: 1. Scanning (if any) is always performed from first frarne (head) to last frame (tai). 
2. Priority is an unsigned 16-bit integer, 
3. Frame pointers are twro wards for LAF made, 1 word for SAF made. 


lock FO 


FIRST 
FRAME 
PTR. 


LAST 
F FRAME 
PTR. 


— 
LOCK FRAME FOR 
ZERO ENTRY LIST 


Figure 3-7. Queue Management 


The lock word is used to ensure that only one CP i essing a particular queue at a time. 
Each queue instruction causes a fetch of the lock word with a Read-Modify-Write (RMW) 
cycle. If the low-order bit of the lock word is set, the RMW cycle is completed without 
changing the lock, I (C) is cleared, and the next instruction is fetched. If the low-order bit of 
lock is cleared, the CP completes the RMW cycle, writing ones into the lock word, and initi- 
ates execution of the queue/dequeue instruction, Each queue/dequeue instruction causes a 
scan of the frames from the head toward the tail. 

The scan continues until the conditions of the particular command are met (a hit), the 
last frame is reached without a hit, or an interrupt occurs. 

When a hit occurs or if the last frame is reached without a hit, the frame is linked into or 
out of the list as appropriate, and I(G) and I(L) are left in a known state. In cither case, the 
CP initiates another RMW cycle, writing zeros into the lock word, sets I(C), then fetches the 
next instruction. If an interrupt* occurs, the CP stops the scan, initiates an RMW. writes 
zeros into the lock word, clears I(C), leaves I(G) and I(L) undefined and backs up P to point 
to the queue/dequeue instruction, before servicing the interrupt. 

Software must build the lock frame of each list to be used. A list with no entries is a lock 
frame in which the first and last frame pointers point to LOCK (see Figure 3-7). The CP 
leaves the lock frame in the same condition when a frame is unlinked from a single frame 


“This includes service of the internal timer at a 120-Hz tat 
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STACK MANAGEMENT 


The Models 43 and larger provide a single stack capability for each interrupt level. The 
Stack Address Register (T) points to the first word of the stack header (Figure 3-8). 

Four generic instructions are provided to manipulate the stack. The instructions, which © 
are described in Section 4. are as follows: 


o Load Stack Address Register (LDT) 
o Store Stack Address Register (STT) 
o Acquire Stack Frame (ACQ) 

o Relinguish Stack Frame (RLQ) 


These are all two-word instructions having a common first word. Appropriate checks are 
made for stack overflow/underflow conditions. 

The stack header contains four entries, two of which are not used, but must contain null 
pointers if upward software compatibility is desired. 

MW is the number of words allocated to this stack. MW is written by software when the 
header is created and referenced (but not altered) by hardware. 

CW represents the number of words currently consumed in this stack. CW is written by 
software when the header is created. Thereafter. the value of CW is a hardware responsibility, 


top of stack 


Lower in 
memory 
Ww 


Length (b) of Frame B 
ww} 
ais Stack Frame B 
cw 
Higher in Length (a) of Frame A 
T 
foaen a Stack Frame A 
of stack a 
t Current Length in Words (CW) 
Maximum Length in Words (MW) 
fo a pt! 
ATAGK MBN ‘ADER 
Register HEADER man? 
must be null 


Figure 3-8. Stack Structure 


SCIENTIFIC INSTRUCTION PROCESSOR 


The Scientific Instruction Processor (SIP) is optionally (CPF9503) available on Models 43, 
7, 53, and 57. The 30 scientific instructions operate on single-precision and double-precision 
(respectively, double-word and quadruple-word fields) with floating-point, integer and zero 
formats, These operands come from main memory, CP registers (following their conversion 
to two- or four-word floating-point quantities) and scientific accumulator (SA) registers. 
Prior to command execution involving two operands, the SIP tests for unequal length 
floating-point values. If the operand lengths are not equal, the destination scientific accumu- 
lator’s length dominates. 
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Control Registers 

There are three scientific control registers in the SIP. Two of these registers, the SIP Mode 
Register (M4) and the SIP Trap Mask Register (MS) reside in the associated CP with a copy 
of their contents stored in the SIP. The third register is the SIP Indicator Register, located 
in the SIP. 


Scientific Indicator (SI) Register 
The 8-bit Sl-register contains error and status indicators that can be tested with the 
scientific branch instructions. 


U |RFU| SI SL | RFU 
where: 

EU = _ Exponent underflow (trap 19) 

SE = Significance error (trap 21) 

PE = Precision error (trap 22 

SG = Greater than 

SL = Less than 


SIP Mode (M4) Register 

The SIP mode, or M4, register is an 8-bit control register residing in the SIP, but witha 
copy in the CP. Both versions are set to 0 upon CP initialization and both may be modified 
with an MTM instruction. If only the SIP is initialized, the CP copy of the register is not 
cleared, and the contents of both versions must be reestablished with an MTM. 


i) I 2 3 4 5 6 7 


R/T |RFU|ML1] ALI JML2} AL2|ML3 | AL3 
——SS 


SAI SA2 SA3 
where: 
R/T = Round/Truncate Mode 
0 = Truncate 
1 Round 
SAI = Scientific Accumulator | 
SA2 = Scientific Accumulator 2 
SA3 = Scientific Accumulator 3 
ML = Memory Length — Length of main memory data field associated with this 


SA. 
0 = 2 words 
1 = 4 words 
AL = Accumulator Length — Length of the value in the scientific accumulator 
data field. 
0 = 2 words 
1 = 4 words 
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SUP Trap Mask (M5) Register 

‘The SIP Trap Mask, or M5 register, is an 8-bit control register residing in the SIP but with 
a copy in the CP. Both versions are set to 0 upon CP initialization and both may be mod- 
ified with an MTM instruction. If only the SIP is initialized, the CP copy of the register is 
not cleared, and the contents of both versions must be reestablished with an MTM- 


0 1 2 3 4 7 
EUM RFUpsEM Jeem RFU 
where: 
EUM = Exponent Underflow Trap Mask 


0 = Trap disable 

‘Trap enable 

SEM = Significance Error Trap Mask 
0 = Trap disable 

1 = Trap enable 

Precision Error Trap Mask 

0 = ‘Trap disable 

Trap enable 

RFU = Reserved for future use (MBZ) 


u 


PEM 


Accumulators 
The SIP contains three variable length scientific accumulators (SA1, SA2, SA3) that may 
contain either single-precision (32-bit) or double-precision (64-bit) floating-point quantities. 


Automatic Round/Truncate 

Scientific operations requiring right scaling, which is the process of shifting floating-point 
mantissa digits to the right, inserting zero digits into the most significant mantissa digit 
positions and increasing the exponent appropriately, may produce results where nonzero 
data is shifted off the end of the scientific accumulator into guatd digit locations. These 
guard digits will be truncated from the result if bit zero of mode register (M4) is zero. If 
bit zero is a one, the result is rounded using the sign nt guard digits. 


Scientific Traps 

As the SIP is an option of the CP and functions as an extension of it, any SIP exception 
conditions are reported to the CP in the form of traps rather than interrupts. This trap 
facility is activated upon detection of specific status conditions during the execution of a 
scientific instruction. The SIP has nine types of trap vectors. 

These traps and the conditions that cause them are shown in Table 3-3. Trap 23, ref- 
erence to unavailable resource, and Trap 24, bus parity or uncorrected main memory error, 
are functions of the Megabus. Trap 20, program error, identifies program errors detected 
by the SIP. Note that program errors detected by the CPU activate Trap 16. If more than 
one trap condition exists, the SIP sends the trap with the highest priority to the CPU. The 
other conditions are lost. The priority of the traps is indicated in Table 3-3 by their 
location; the trap at the top (Trap 31) has the highest priority. 
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TABLE 3-3. SIP TRAP VECTORS AND EVENTS 


‘Trap = 
Vector SIP Registers 
Number Trap Event cyua Indicator Mask 
31 SIP OLT Fault U - 
33 Reference to Unavailable Resouree U = 
24 Megabus/Memory Error U - 
20 Program Error (SIP) u - 
7 Divide by Zero U = 
8 Exponent Overflow U = 
21 Significance Error € Ms 
19 Exponent Underilow © MS 
2 Precision Error c M5 
00 No Trap Event Set s = 


4C — Conditioned Trap on Indicator and Mask 
U = Unconditioned Trap 


Data Formats 
Floating-point data appears either as a single-precision (32-bit) or double-precision 
(64-bit) constant, as follows: 


0 678 31 
¢ s| M ] 
SINGLE-PRECISION 
oO 678 63 
iG M 
DOUBLEPRECISION 
where: 


C = the characteristic (excess 64 power-of-16 exponent) of the number. The character- 
istic represents exponents with a range from -64 to +63. Since the characteristic 
has no sign bit, the number 64 (decimal) is effectively added to each exponent, thus 
allowing a characteristic range of 0 to 127 to represent exponents with a range of 
-64 to +63. 

S ign bit (0 = +; 1 =-) of the mantissa. 
M = magnitude of the mantissa. 

Signed integer data contains a sign (0 = +; | =~) in bit O and the data in the remaining 

bits. Negative numbers appear in twos-complement form. Word and double-word formats 
are permitted, as follows: 


I Is 
DATA 
WORD 

1 15 16 31 

T 
DATA 
L aa 
DOUBLE-WORD 


Single-word integers must be in general registers R4, RS or R6 of the CP in order to be 
processed by the SIP. Double-word integers must be in registers R6 and R7. 


CENTRAL PROCESSOR 
ARCHITECTURE 3-20 C71 


Software Simulation of the SIP 

For systems on which a Scientific Information Processor (SIP) is not available, GCOS 
provides the equivalent of the SIP functions through software simulation, Two trap handlers, 
the Floating-Point Simulator. entered via trap vector 3, and the Scientific Branch Simulator: 
entered via trap vector 5, ure available. These two simulators are described in the System 
Service Macro Cails manual, Order No. CBO8. 


COMMERCIAL INSTRUCTION PROCESSOR 


The Commercial Instruction Processor (CIP) is only available with the Models 47 and 57. 
The CIP operates on a powerful set of 30 instructions including numeric, alphanumeric. 
edit, and branch instructions. Operands are specified by data descriptors that give operand 
location, length, type (packed/unpacked decimal or character string), and other necessary 
information (leading/trailing sign, blank fill/no fill, ete.) 


There are two commercial control registers in the CIP, the CIP Mode Register and the CIP 
Indicator Register. 


CIP Mode (M3) Register 

The 8-bit CIP mode register is a copy of the M3 register (in the CPU) which is provided 
for use with the CIP. Both are set to zero at initialization of the CPU. Both registers may be 
modified with an MTM instruction. If only the CIP is initialized, the M3 register is not 
cleared, and ‘the contents of both registers must be established with an MTM instruction. 


z 3 7 
[ ov [rR | RFU 


where: 
OV = Overflow Trap Mask 
0 = Disable Trap 
| = Enable Trap 
TR = Truncation Trap Mask 
RFU = Reserved for future use (MBZ) 


Note that, although the contents of the CIP mode register are not saved, the equivalent 
information in the M3 register is saved or restored as a function of the mask bits in the 
interrupt save area. When a restore is done, the restored value is sent to the CIP by the CPU 


CIP Indicator Register 

The 8-bit CIP indicator register is cleared at initialization. During the execution of an 
instruction that affects the register, only the bits pertinént to the instruction are preset (set 
or reset). All other bits remain unchanged. During the execution of a branch instruction, 
all bits including the one being tested are left unchanged 
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0 4 2 3 4 ‘s 6 7 
[ov [oe [5] REU [¢ L REU] 


where 
OV = Overflow occurred during decimal instruction 
TR = Alphanumeric result is truncated 
SF Sign fault (negative operand is stored in unsigned field) 
G Greater than 
L = Less than 


Commercial Traps 

CIP exception conditions are reported to the CP in the form of traps rather than inter- 
rupts. This trap fucility is activated upon detection of specific status conditions during the 
execution of commercial instructions. The CIP has eight types of trap vectors, These traps 
and the conditions that cause them are shown in Table 3-4. 


TABLE 3-4, CIP TRAP VECTORS AND EVENTS 


Trap Vector 


Number Trap Event 
23 Reference to U - = 
Unavailable Resource 

Bus or Memory Error U 
Divide by Zero U 2 
legal Specification u = - 
legal Character L = ~ 
Truncation ig cl cM 
Overflow ic cl cM 
Inoperative CIP U = - 


8C = conditional Trap 
U= unconditional Trap 


Software Simulation of the CIP 

For systems on which a Commercial Instruction Processor (CIP) is not evailable (.e., 
Models 23. 33. 43, and 53), GCOS provides the equivalent of the CIP functions through 
software simulation. The CIP Simulator is entered yia trap vector 5. 


MEMORY MANAGEMENT UNIT 


‘The Memory Management Unit (MMU) is optionally (CPF950 1) available on the Models 43 
and 47, and standard on the Models 53 and $7. MMU functionality provides for the sep- 
aration of memory into 16/31 independent segments. the relocation of each segment 
independently in physical memory, and the protection of each segment from improper 
aecess, based on software-specitied attributes. 


Segmentation 

The MMU option divides the million-word address space into 16 regions of 65,536 words 
each, numbered O through 15, The first of these regions ubdivided into 16 regions of 
4096 words each, numbered 0.00 through 0.15. Each of these regions may contain a seg- 
ment of program address space. Each segment may range from 256 words in size up to the 
4K or 64K size of its associated region, in steps of 256 words, 
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In Short Address Form (SAF), segments 0.00 through 0.15 are available, corresponding 
to the SAF address space of 64K. In Long Address Form (LAF), segments | through 15 are 
also available, yielding a total of 31 segments corresponding to the LAF address space of 
one million words, See Figure 3-9. 


SAF 
ADDRESS 
AnbRESS SATE 
0.00 
9 SPACE eee; a 
0 0.01 
64K 8K 
1 
128K 
a 56k 
192k 0.14 
q oe | 
met ——4 — 64K 
4 
960K 
15 
1024K 


Figure 39, Memory Layout with Memory Management Unit Option 


Relocation 

Through 32-bit “segment descriptors,” softw can specify the location each segment is 
to occupy in main memory. This is given as a base (on a 256-word boundary) and a size (in 
multiples of 256 words). Each segment is relocated independently; segments need not be 
contiguous, be in order, or have any other particular physical relationship. 


Protection 

The MMU implements protection using the “rin proach pioneered by Honeywell’s 
Multics system. At any time, the processor is operating in one of four “rings” of privilege. 
Each ring, starting with Ring 0 and continuing through Ring 3, is more privileged than the 
next outer ting. Thus, Ring can be used for the most critical system functions; Ring I for 
less critical system functions: Ring 2 to create a “user supervisor” or for well-checked-out 
user programs: and Ring 3 for the majority of user software. Programs operating in one ring 
cannot access code or data reserved for rings of higher privilege. 

The MMU controls three forms of access: read, write, and execure, Each form of access 
is limited to programs operating in a certain ring or lower-numbered ring. Access control is 
implemented on a segment basis, so each segment has its own protection attributes. Access 
control can support many different objectives 


© Data protection — critical system contro! data can be placed in a user’s address space, 

so that operating system routines executing on a user’s behalf can access it while pro- 

tecting it from user programs 

Source data integrity — data to be read but not modified can be given read, but not 

write, access. 

© Software protection — proprietary routines which a user is permitted to execute can be 
made inaccessible to “read” operations, thus preventing copying 

© Program checkout — by making data segments nonexecutable and code segments 
nonwritable, many programming errors can be detected quickly. 


c 


An additional margin of protection is provided by the segment tables themselves. There is 
no way a program can attempt to access data not covered by that program’s segment 
descriptors. 
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Segment Descriptor Format 
Each segment is described by a 32-bit segment descriptor (see Figure 3-10). 


a 4 6 
1 
v SEGMENT BASE 
ge ie ie py ree a 
L Starting address of this segment in real memory, in units of 
ity bit; 256 words; low-order zeros are appended to yield the 
id ( i actual starting address of the segment 
only i this bit equals one, 
ig_17 18 19 20 21 22 u 
np | we | cP |uez| SIZE 
L L 1 ies x 1 Ak 


L 
fs Must be zero © size ofthe soument, in units of 256 words 


Execute Permission; simular to RP 
Write Permission; similar to RP 


Read Permission; defines the rings within which the 
processor must be operating in order to read data within 
this segment; the field value, interpreted as a binary 
‘umber from 0 to 3, is the lowest-privilege ring which 
can read the data, 


Figure 3-10. Segment Descriptor Format 


During program execution, the segment descriptors are contained within the MMU hard- 
ware itself. At tem initialization, the descriptors are given’ yalues which create a “‘trans- 
parent” mode of execution: each virtual address maps into the same real address, and all 
access modes are permitted in all four rings. Therefore, all programs execute on a system 
with the MMU exactly as they would on a system without it. until explicit software action 
changes the MMU tables. This can happen in one of two ways: 


o When a level change takes place, if desired. Specifically, bit 0 of the second Interrupt 
Mask (ISM 2) in the Interrupt Save Area (ISA) of a level determines whether the MMU 
registers are to be loaded when that level is activated. If this bit is 1, the Address Space 
Vector in the ISA indicates a 62-word area which contains 31 descriptor images. These 
images are loaded into the MMU before instruction execution starts at the new level. 

o When an Activate Segment Descriptor instruction is executed, This instruction loads 
a single segment descriptor into the MMU. 


Descriptor tables in memory are not referred to during program execution. Therefore, there 
is no performance degradation with the Memory Management Unit; programs using it 
operate at the same speed as programs which do not. 
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As instructions are executed, three types of addressing errors can occur, These are 
detected by the MMU and result in program traps. They are as follow 


1, Nonexistent segment — an attempt to reference a segment whose validity bit is zero. 
Causes Trap 15 (unavailable resource). 

2. Aceess out of bounds — an attempt to reference an address beyond the size established 
by the segment descriptor. Causes Trap 15 (unavailable resource), 

3. Protection violation — an attempt to perform a type of access not permitted by the 
appropriate permission field (RP, WP or EP) in the segment descriptor. Causes Trap 
14 (protection violation). 


Three instructions invoke MMU functionality, over and above the relocation and protec- 
tion functions performed on every memory access. They are: 


They are described in Section 4 of this handbook, 
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